Skip to content

Latest commit

 

History

History
60 lines (51 loc) · 2.06 KB

File metadata and controls

60 lines (51 loc) · 2.06 KB

WebChecker

Generic badge

WebChecker is a simple information gathering tool designed to help pentesters gather information about a target website. Screen-Recording-2022-02-04-at-0

Highlights

WebChecker 1.0.0 supports:

  • WordPress Identification (4 stages)
  • Joomla Identification (1 stage)
  • Magento Identification (4 stages)
  • Drupal Identification (3 stages)
  • **Directory Bruteforcing **
  • Detailed Headers Report

Prerequisites

WebChecker is built with Python 3 and has been tested on MacOS so far.

Installing WebChecker

To install WebChecker on your machine, run the following commands on your terminal:

git clone git@github.com:mihneamanolache/WebChecker.git 
cd WebChecker
pip install -r requirements.txt

Using WebChecker

WebChecker runs in terminal and can be used both with or without terminal arguments. The arguments it accepts are:

  • -u or --url to specify the targeted URL
  • -b or --brute to discover directories using bruteforce

Command example using arguments:

python3 WebChecker.py -u https://scoala.buzz/ -b /Users/laptop/Desktop/Wordlists/directories.txt 

Screenshot 2022-02-04 at 09 14 14

Where directories.txt is a simple wordlist which contains the following lines (in this case):

login
cpanel
archive
resources
email
wp-content
admin
.httaccess
.httaccess1
passwd
passwords
intranet

Note that you can use any other wordlist (ie. dnsmap.txt). Just specify the path to the file after -b

If used withoth the --url switch, the program will prompt the user to enter the target website manually:

python3 WebChecker.py 

Screenshot 2022-02-04 at 09 17 00